David O'Brien wrote:
Simo Sorce wrote:
> On Wed, 2009-12-02 at 16:27 -0500, Jenny Galipeau wrote:
>> Hey, can you give me these scenarios? I have automated tests that
>> check
>> that member and memberof attributes are removed when associated
>> groups
>> and or user members are deleted. I would like to expand these tests
>> for regression testing of the problem.
> Ah yes very easy to test actually.
>
> This is the test I used:
> Create 5 groups A,B,C,D,E
> Create 5 users a,b,c,d,e
> Add each user to the corresponding group then add each group to another,
> this is the tree I end up with:
>
> BEWARE!! ASCII art follows :)
>
> A--a
> |
> \--B--b
> |
> \--C--c
> |
> \--D--d
> |
> \--E--e
>
> Therefore the memberof attrs for each user are:
>
> a -> A
> b -> A,B
> c -> A,B,C
> d -> A,B,C,D
> e -> A,b,C,D,E
>
>
> now delete group C
>
> the results must be:
>
> a -> A
> b -> A,B
> c -> none
> d -> D
> e -> D,E
>
> If they are different there is a bug.
>
> Simo.
>
>
>
>
How can I determine which groups are members of which other groups?
I created GroupA and GroupB, making B a member of A
I created UserA and UserB, making them members of obvious groups.
# getent -s sss group
GroupA:*:511:UserA,UserB
GroupB:*:512:UserB
That's fine, but how do I know that UserB is a member of GroupA only
because of group nesting?
thanks
And, use cases for group nesting? Why is it a good thing?
--
David O'Brien
Red Hat Asia Pacific
+61 7 3514 8189
http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git
"The most valuable of all talents is that of never using two words when
one will do."
Thomas Jefferson